Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Api Bfla Api Bola Api Broken Auth Api Broken Object Prop Auth Api Dos Api Improper Inventory Management Api Misconfiguration Api Ssrf Arbitrary File Creation Arbitrary File Read Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial Of Service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File-upload File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilities LLM Ldap Injection Llm Excessive Agency Llm Insecure Output Handling Llm Prompt Injection Llm Prompt Leakage Llm Sensitive Information Disclosure Malware Missing Update Privilege Escalation RCE SSRF Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Apache Log4j2 JNDI Remote Code Execution (per folder) Critical Apache Log4j socket receiver deserialization vulnerability Critical Apache Memory Allocation with Excessive Size Value Vulnerability (CVE-2026-49975) High Apache mod_jk access control bypass Medium Apache mod_negotiation filename bruteforcing Low Apache mod_rewrite open redirect Medium Apache OFBiz Authentication Bypass (CVE-2023-51467) Critical Apache OFBiz Log4Shell RCE High Apache OFBiz RCE (CVE-2024-32113/CVE-2024-36104/CVE-2024-38856) Critical Apache OFBiz RCE (CVE-2024-45195) Critical Apache OFBiz SOAPService Deserialization RCE High Apache OFBiz SSRF (CVE-2023-50968) High Apache OFBiz SSRF (CVE-2024-45507) Critical Apache OFBiz XMLRPC Deserialization RCE (CVE-2020-9496/CVE-2023-49070) High Apache perl-status enabled Medium Apache Proxy HTTP CONNECT method enabled Medium Apache read beyond bounds in mod_isapi Vulnerability (CVE-2022-28330) Medium Apache read beyond bounds via ap_rwrite() Vulnerability (CVE-2022-28614) Medium Apache REST RCE CVE-2018-11770 High Apache Roller OGNL injection High Apache Server-Info Detected Medium Apache Server-Status Detected Medium Apache Shiro authentication bypass High Apache Shiro Deserialization RCE High Apache Solr Deserialization of untrusted data via jmx.serviceUrl High Apache Solr endpoint Low Apache Solr Log4Shell RCE High Apache Solr Parameter Injection Medium Apache solr service exposed High Apache Solr SSRF CVE-2017-3164 Medium Apache Spark Master Unauthorized Access Vulnerability High Apache Spark Web UI Unauthorized Access Vulnerability Medium Apache stronghold-info enabled Low Apache stronghold-status enabled Low Apache Struts 2 ClassLoader manipulation and denial of service High Apache Struts 2 ClassLoader manipulation and denial of service (S2-020) High Apache Struts2 remote code execution vulnerability Critical Apache Struts2 Remote Command Execution (S2-048) High Apache Struts2 Remote Command Execution (S2-052) High Apache Struts2 Remote Command Execution (S2-053) Critical Apache Struts Path traversal (S2-067/CVE-2024-53677, S2-066/CVE-2023-50164) Critical Apache Struts Remote Code Execution (S2-057) High Apache Tapestry Unauthenticated RCE (CVE-2019-0195, CVE-2021-27850) High Apache Tapestry weak secret key High Apache Tika XXE via PDF XFA Content (CVE-2025-66516) Critical Apache Tomcat 7PK - Errors Vulnerability (CVE-2016-8745) High Apache Tomcat 7PK - Security Features Vulnerability (CVE-2002-0493) High Apache Tomcat 7PK - Security Features Vulnerability (CVE-2014-9634) Medium Apache Tomcat 7PK - Security Features Vulnerability (CVE-2014-9635) Medium Apache Tomcat Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-38286) High Apache Tomcat Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2025-48988) High Apache Tomcat Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-41284) High Apache Tomcat Always-Incorrect Control Flow Implementation Vulnerability (CVE-2026-53404) High Apache Tomcat Always-Incorrect Control Flow Implementation Vulnerability (CVE-2026-55276) Critical Apache Tomcat Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2025-49125) High Apache Tomcat Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2018-8037) Medium Apache Tomcat Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2021-43980) Low Apache Tomcat Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2025-52434) High Apache Tomcat Configuration Vulnerability (CVE-2008-0128) Medium Apache Tomcat Configuration Vulnerability (CVE-2010-4312) Medium Apache Tomcat Credentials Management Errors Vulnerability (CVE-2009-3548) High Apache Tomcat Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2007-4724) Medium Apache Tomcat Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-6357) Medium Apache Tomcat Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-5351) High Apache Tomcat Cryptographic Issues Vulnerability (CVE-2011-5064) Medium Apache Tomcat CVE-2012-5568 Vulnerability (CVE-2012-5568) Medium Apache Tomcat CVE-2016-6794 Vulnerability (CVE-2016-6794) Medium Apache Tomcat CVE-2016-8735 Vulnerability (CVE-2016-8735) Critical Apache Tomcat CVE-2017-5651 Vulnerability (CVE-2017-5651) Critical Apache Tomcat CVE-2018-1304 Vulnerability (CVE-2018-1304) Medium Apache Tomcat CVE-2018-1305 Vulnerability (CVE-2018-1305) Medium Apache Tomcat CVE-2019-2684 Vulnerability (CVE-2019-2684) Medium Apache Tomcat CVE-2020-0822 Vulnerability (CVE-2020-0822) High Apache Tomcat CVE-2020-13943 Vulnerability (CVE-2020-13943) Medium Apache Tomcat CVE-2022-29885 Vulnerability (CVE-2022-29885) High 1...6789...335 7 / 335
